During an investigation of database theft from an organization's web site, it was determined that the Structured Query Language (SQL) injection technique was used despite input validation with client-

The correct answer is C. Implement server-side filtering. The action that provides the greatest protection against the same attack occurring again is to implement server-side filtering. Server-side filtering is the process of validating and sanitizing the user input on the server side, before passing it to the database or application. S

Submitted by saadiq_pk· Mar 5, 2026Software Development Security

Question

During an investigation of database theft from an organization's web site, it was determined that the Structured Query Language (SQL) injection technique was used despite input validation with client- side scripting. Which of the following provides the GREATEST protection against the same attack occurring again?

Options

AEncrypt communications between the servers
BEncrypt the web server traffic
CImplement server-side filtering
DFilter outgoing traffic at the perimeter firewall

How the community answered

(26 responses)

A
8% (2)
B
12% (3)
C
77% (20)
D
4% (1)

Explanation

The action that provides the greatest protection against the same attack occurring again is to implement server-side filtering. Server-side filtering is the process of validating and sanitizing the user input on the server side, before passing it to the database or application. Server-side filtering can prevent SQL injection attacks, which are the attacks that exploit the vulnerability of the database or application to execute malicious SQL commands or queries. SQL injection attacks can result in data theft, corruption, or deletion, as well as unauthorized access or privilege

Topics

#SQL injection#server-side validation#input validation#web application security

Community Discussion

No community discussion yet for this question.

Full CISSP Practice